Domain 1: Design Resilient Architectures – 30%

AWS Global Infrastructure (Regions, Availability Zones, Edge Locations)

Multi-tiered architectures within a Virtual Private Cloud (VPC)

Amazon Route 53

Amazon CloudFront

Disaster recovery and business continuity strategies

Decoupled and event-driven architectures

AWS storage services

Domain 2: Design High-Performing Architectures – 28%

Auto-scaling and application and network elastic load balancers

Amazon EC2, ECS, and Elastic Beanstalk

Storage performance with the Elastic File System and Amazon S3 features

VPC Networking components: Subnets/ENIs/ENA’s/NACLs/Security Groups/NAT Gateways/ Bastion hosts/VPC Endpoints/VPN/Direct Connect/Transit Gateway/AWS Global Accelerator

AWS Databases

High availability across Amazon DynamoDB and Amazon Aurora

Amazon DynamoDB Accelerator (DAX)

Domain 3: Design Secure Applications and Architectures – 24%

Deep dive on AWS Identity & Access Management

Amazon Cognito for web & mobile security

AWS Organizations – Service Control Policies (SCPs)

Protecting application with AWS WAF, Firewall Manager, and Shield

Understand AWS logging mechanisms

Audit, monitor and evaluate with AWS Config and AWS CloudTrail

Data encryption using the AWS Key Management Service (KMS)

AWS Certified Solutions Architect – Associate

Domain 4: Design Cost-Optimized Architectures – 18%

AWS storage costs across Amazon S3, Glacier, EFS, Storage Gateway, AWS Backup

Savings plans and reserved instances for compute instances

Cost optimization across the network infrastructure

More...